CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- campcodes online job finder systemCampcodes Online Job Finder System controller.php sql injection6.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System index.php sql injection6.3 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification5.4 Medium
- campcodes online job finder systemCampcodes Online Job Finder System index.php sql injection6.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System login.php sql injection6.3 Medium
- jeff starr simple ajax chatSimple Ajax Chat < 20240223 - Unauthenticated Stored XSS7.1 High
- codepeople appointment booking calendarBooking Calendar < 1.3.83 - CSRF appointment scheduling8.8 High
- travelpayouts, unknown travelpayouts: all travel brands in one place +1 moreTravelpayouts <= 1.1.15 - Open Redirect6.1 Medium
- bowo system dashboardSystem Dashboard < 2.8.10 - XSS via Header Injection5.4 Medium
- jp2112 standout color boxes and buttonsStandout Color Boxes and Buttons <= 0.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- remyb92 translate wordpress with weglot – multilingual ai translationTranslate WordPress and go Multilingual – Weglot <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes6.4 Medium
- campcodes online job finder systemCampcodes Online Job Finder System controller.php sql injection6.3 Medium
- campcodes online job finder system, online job finder system project job finder system +1 moreCampcodes Online Job Finder System index.php sql injection6.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System index.php sql injection6.3 Medium
- springCVE-2024-22258: PKCE Downgrade in Spring Authorization Server6.1 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 moreGamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- gamipress, rubengc gamipress – button +1 moreGamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- kilbot wcpos – point of sale (pos) plugin for woocommerceWooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure4.3 Medium
- campcodes online job finder system, online job finder system project job finder system +1 moreCampcodes Online Job Finder System GET Parameter controller.php sql injection6.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System controller.php sql injection6.3 Medium
- inc2734 smart custom fieldsSmart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure4.3 Medium
- rewardsfuel contests by rewards fuelContests by Rewards Fuel <= 2.0.64 - Authenticated (Contributor+) Stored Cross-Site Scripting via update_rewards_fuel_api_key6.4 Medium
- rewardsfuel contests by rewards fuelContests by Rewards Fuel <= 2.0.62 - Cross-Site Request Forgery to Stored Cross-Site Scripting5.4 Medium
- nasirahmed advanced form integration, afi – the easiest integration plugin +1 moreAdvanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id6.1 Medium
pdns-recursorDebianpdns-recursor - regression updateNo score- zhyd oneblogOneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- zhyd oneblogOneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...6.1 Medium
- zhyd oneblogOneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- zhyd oneblogOneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- zhyd oneblogOneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...6.1 Medium
- oneblog project oneblogA stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute...6.1 Medium
- totolink x2000r firmwareThere is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup...5.4 Medium
- unit4 financials by coda, coda unit 4 financials +1 moreAn incorrect access control issue in Unit4 Financials by Coda v.2023Q4 allows a remote attacker...8.1 High
- freeimage project freeimageNull Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local...3.3 Low
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...7.8 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageNull Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local...5.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...5.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...5.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...5.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...7.8 High
- Show moreLoading…